Developers started using it. Then they started talking about it. Then the speculation about who built it got genuinely feverish — and the answer, when it came, was more interesting than most of the guesses.

Here’s the whole story, plus everything now confirmed about what the model actually is.

What Happened, Chronologically

August 20, 2026: A model called “stealth/ox-alpha” appeared on OpenRouter, described simply as a reasoning model built for coding, sustained agentic work, and production workloads. OpenRouter’s own listing was unusually candid: it was “developed and operated by a third-party provider who has chosen to remain anonymous during this preview,” and OpenRouter itself was only routing requests to it, not building or owning it.

Two things made people pay attention immediately. It carried a roughly one-million-token context window, and it was free.

The following days: Independent testing showed genuinely strong coding performance, particularly on front-end and UI work. Stripe CEO Patrick Collison — whose company was in the process of acquiring OpenRouter — publicly called it “very impressive.” Speculation about the identity of its creator went in every direction: an unreleased GLM model from the Chinese company Z.ai, an unreleased version of Microsoft’s MAI, or something else entirely. Some people insisted confidently it couldn’t be Chinese. Others insisted with equal confidence that it was.

August 26, 2026: Z.ai claimed it. Ox Alpha was GLM-5.3-Flash, and the company released the model publicly — including open weights on Hugging Face under an MIT licence.

For roughly twelve days, an unnamed model with no company behind it had been near the top of OpenRouter’s coding charts. Then it got a name.

The Free Preview: 100 Trillion Tokens a Day, and What Actually Got Used

The access terms are a big part of why Ox Alpha spread as fast as it did.

The release was coordinated with OpenCode, the open-source coding agent, which announced the model would be free for roughly a week with rate limits described as “near unlimited” — and said the anonymous provider had servicing capacity for 100 trillion tokens per day. That’s an aggregate capacity claim about the service, not a per-user quota, but it was an extraordinary thing to announce alongside a model nobody had claimed ownership of.

Developers responded accordingly, and the resulting usage figures are the most concrete evidence of how seriously the model was taken:

• 11.6 trillion tokens in its first three full days on OpenRouter — the largest model launch in OpenRouter’s history. For comparison, the next-biggest launch on record generated 4.4 trillion tokens over the same opening period.
• Roughly 6.5 trillion tokens per day on OpenCode across the first four days, totalling around 26 trillion tokens. That’s about 6.5% of the advertised 100 trillion daily capacity — genuinely heavy usage, and still nowhere near the ceiling.
• An average of 3.2 million tokens per completed session, and roughly 25 sessions per unique user. Those aren’t casual test queries; that’s people running serious, long agentic coding jobs.

The model also supported a maximum output of 131,072 tokens in a single response, alongside its 1,048,576-token context window — unusually generous limits on both ends.

The Data Retention Detail Developers Kept Missing

One practical point got lost in the excitement, and it genuinely mattered for anyone feeding proprietary code into a free anonymous endpoint: the two routes had different data terms.

OpenCode stated that prompts sent through its service had zero-day retention and were not used for training. OpenRouter’s own listing, meanwhile, said the anonymous provider retained prompts and completions — while stating they were not used for training.

Those are meaningfully different guarantees, and “free Ox Alpha access” was not interchangeable between them. It’s a useful reminder in general: when a model is free and its operator is anonymous, checking which specific endpoint is receiving your code is worth the two minutes it takes.

It’s also worth noting that during the stealth window, Ox Alpha was frequently described as “open source” in social media coverage. It wasn’t. There were no published weights, no technical report, and no licence — just a free preview of a closed model. The open weights only arrived later, with the GLM-5.3-Flash reveal.

Why Release a Model Anonymously at All?

Stealth releases like this have become a recognisable pattern in AI. The logic is straightforward: if nobody knows who built a model, nobody evaluates it through the lens of brand expectations. Reactions are based purely on output quality.

For a lab that isn’t one of the household-name Western AI companies, that’s a genuinely valuable form of testing. Developers who might scroll past a model badged with a less familiar name will happily use an anonymous one that performs well — and the resulting feedback is unfiltered by any preconception. Judging by how much attention Ox Alpha attracted in under two weeks, the strategy worked.

What GLM-5.3-Flash Actually Is

Now that the model has a name, here’s the confirmed picture:

• Architecture: A sparse mixture-of-experts model with 320 billion total parameters, but only 18 billion active for any given token. It uses a hybrid sparse-plus-linear attention design that Z.ai built specifically to keep long-context work from becoming prohibitively expensive to serve.
• Context window: Roughly 1 million tokens — large enough to hold entire codebases or lengthy specifications in a single request without chunking or retrieval workarounds.
• Multimodal, natively. This is the first natively multimodal model in Z.ai’s GLM-5 family, accepting text and images (and, per OpenRouter’s listing during the preview, video), and returning text.
• Open weights. Released on Hugging Face under an MIT licence, which is unusually permissive — you can self-host and use it commercially.
• Tool calling and structured output are both supported, which matters for anyone building agents rather than chatbots.

The architectural detail worth understanding is that active-parameter count, because it explains the pricing. Only 18 billion of the model’s 320 billion parameters activate per token, which is why a very large model can be served at roughly the cost of a small one.

The Benchmarks — With the Caveats That Matter

Z.ai’s own launch numbers put GLM-5.3-Flash at 84.3 on Terminal-Bench 2.1, against Claude Opus 4.8 at 85.0 and GPT-5.6 Terra at 87.4. On the company’s in-house Code Bench, it reached 29.0 at maximum effort versus 29.5 for Opus 4.8. Those two comparisons are the source of essentially every “matches Claude at a tenth of the price” headline written about it.

Two important caveats before taking that at face value. First, most of that comparison table is Z.ai’s own evaluation, using comparison models and settings the company selected. That doesn’t make it dishonest, but a vendor launch table is not the same as independent verification.

Second, and more usefully: the DeepSWE result did hold up independently. Z.ai self-reported 63.4 Pass@1 on DeepSWE v1.1, and the official DeepSWE leaderboard subsequently carried a matching entry at roughly 63%. That’s worth noting specifically because vendor benchmark claims holding up under independent testing is rarer than it should be.

Independent evaluations from Artificial Analysis place it around 57 on their Intelligence Index, though published figures from different sources and snapshots vary somewhat, so treat any single index number as approximate rather than definitive.

One number worth correcting, since it circulated widely: during the stealth window, an eye-catching “80% on DeepSWE” figure spread rapidly across social media, apparently beating both GPT-5.6 Sol and Claude Fable. That result came from a single developer running a subset of just ten tasks, and they flagged the high variance themselves at the time. The verified full-benchmark number is roughly 63% — still a very strong result, and a large jump over the previous GLM generation, but not the frontier-beating figure the early screenshots suggested.

Where It’s Genuinely Strong

Hands-on testing across the developer community converged on a few consistent strengths:

• Front-end and UI generation. This came up repeatedly. Testers described output with clean typography, restrained colour use, and consistent spacing across long pages — noticeably less of the generic “AI-looking” layout that most models default to.
• Long-horizon agentic coding. Multi-step software engineering tasks that unfold over many turns, rather than single-shot code generation.
• Long-context work. The million-token window combined with attention architecture built specifically to handle it means large codebases stay genuinely usable in one session.
• Price-to-performance. This is the headline. Near-frontier agentic coding at roughly a tenth of the cost of comparable models is the entire pitch, and it largely holds up.

Where It Isn’t

Being honest about the trade-offs matters more than the marketing:

• It’s slow. Independent measurements put output speed around 50 tokens per second, which is below average. Despite the name, “Flash” refers to cost efficiency, not speed.
• It’s verbose. Multiple independent evaluations flag this specifically. Verbosity partly offsets the cheap per-token pricing, since you’re paying for more tokens.
• Self-hosting is not lightweight. The open weights are genuinely open, but the FP8 checkpoint runs to roughly 306 GiB. That rules out running it on modest local hardware, regardless of the MIT licence.
• It’s not the flagship. Don’t confuse GLM-5.3-Flash with the full GLM-5.3, which is a separate, more expensive, text-only model aimed at coding and cybersecurity work. Flash is the cheap, multimodal, high-throughput sibling.

Pricing

Z.ai’s list pricing is $0.15 per million input tokens, $0.50 per million output tokens, and $0.03 per million cached input tokens.

A 50% launch promotion has been running that halves those rates to $0.075, $0.25 and $0.015 respectively — but that promotion was scheduled to end on September 9, 2026, so check current pricing before planning around the discounted rate.

For context, Z.ai’s flagship GLM-5.3 is listed at roughly $1.40 input and $4.40 output per million tokens. Flash genuinely is about a tenth of the price of its bigger sibling.

How to Actually Use It

• Via OpenRouter using the model ID z-ai/glm-5.3-flash. OpenRouter routes across many providers with automatic failover, and you can pin or exclude specific providers.
• Directly through Z.ai’s API, where the model code is glm-5.3-flash.
• Self-hosted from the MIT-licensed weights on Hugging Face — viable only if you have serious GPU infrastructure, given the checkpoint size.
• Note that the stealth/ox-alpha route is no longer the way in. That was the temporary preview identity, and the free window has closed.

What This Episode Actually Tells Us

The Ox Alpha saga is a small story with a couple of genuinely significant implications.

The first is about how quickly the cost curve is moving. A model delivering near-frontier agentic coding performance, with a million-token context and native multimodality, at roughly a tenth of flagship pricing, with open weights — that combination didn’t exist as an option a year ago. For teams building AI features where cost per call actually determines whether the product is viable, that changes the maths.

The second is about how blind evaluation works. For twelve days, thousands of developers judged this model purely on output, with no brand attached. It performed well enough that a major tech CEO praised it publicly and speculation ran wild about which Western lab must have built it. When the answer turned out to be a Chinese lab, that reaction had already been recorded without any of the usual filters applied.

Both of those are worth sitting with if your assumption is that the best AI models will always come from the companies you’d expect, at the prices you’d expect.

Frequently Asked Questions

What is Ox Alpha?
Ox Alpha was the anonymous preview codename for an AI model that appeared on OpenRouter on August 20, 2026, offered free with a roughly one-million-token context window and multimodal input. On August 26, 2026, it was revealed to be Z.ai’s GLM-5.3-Flash.

Is Ox Alpha still available?
Not under that name. The stealth preview and its free access window have ended. The model is now available publicly as GLM-5.3-Flash, through OpenRouter, Z.ai’s own API, and as open weights on Hugging Face.

How much free usage did Ox Alpha offer?
The model was free for roughly one week from August 20, 2026, with rate limits described as “near unlimited.” OpenCode, which distributed it alongside OpenRouter, said the anonymous provider had servicing capacity for 100 trillion tokens per day — an aggregate service capacity claim rather than an individual user quota.

How much was Ox Alpha actually used?
It generated 11.6 trillion tokens in its first three full days on OpenRouter, the largest model launch in that platform’s history — the previous record was 4.4 trillion over the same period. On OpenCode, usage averaged roughly 6.5 trillion tokens per day across the first four days, with an average of 3.2 million tokens per session.

Was Ox Alpha open source during the free preview?
No. Despite being widely described that way, the stealth preview had no published weights, technical report, or licence — it was a free preview of a closed model. Open weights were only released later, under the MIT licence, when Z.ai revealed the model as GLM-5.3-Flash.

Who made Ox Alpha?
Z.ai (also known as Zhipu AI), a Chinese AI company. During the anonymous preview, speculation ranged from Z.ai’s GLM series to an unreleased Microsoft model, with no consensus until Z.ai confirmed it.

How much does GLM-5.3-Flash cost?
List pricing is $0.15 per million input tokens, $0.50 per million output tokens, and $0.03 per million cached input tokens. A 50% launch promotion halved those rates but was scheduled to end September 9, 2026, so verify current pricing.

Is GLM-5.3-Flash good for coding?
It performs strongly on coding and agentic benchmarks, scoring 84.3 on Terminal-Bench 2.1 against Claude Opus 4.8’s 85.0, with its DeepSWE result of roughly 63% independently verified. Testers particularly praised its front-end and UI generation. The main trade-offs are below-average output speed and notable verbosity.

Can I run GLM-5.3-Flash myself?
Yes in principle — the weights are on Hugging Face under an MIT licence. In practice, the FP8 checkpoint is around 306 GiB, so self-hosting requires substantial GPU infrastructure rather than a local workstation.

Share

The post Ox Alpha: The Mystery AI Model That Topped the Charts — And What It Turned Out to Be appeared first on Blog.